PRIVACY STATEMENT
Policy Updated October 2026
You were directed to our Privacy Statement because you visited one of our websites as a consumer or investor. We want you to understand how your personal information is collected, used, shared, and protected under the California Consumer Privacy Act, as amended (CCPA), and other applicable laws.
Welcome to Statehouse Holdings! We value your privacy and take steps to ensure a safe online experience. This Privacy Statement describes how Statehouse Holdings and our affiliates and subsidiaries, including Urbn Leaf, Terpene Station, Fuzzies, Loudpack, Dimebag, Kingpen, Key and Harborside(collectively “Statehouse Holdings,” “we,” “us” or “our”), collects and uses your personal information and it applies to both online and offline data collection, through our website and at any of our physical locations (collectively, “Services”). This Privacy Statement applies to any website where it is linked to, including the following websites:
By using our Services, you acknowledge that you have been provided this Privacy Statement. Where consent is required by law, we will request it separately.
“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
Collection of your Personal Information
We may collect the following categories of personal information from you directly; automatically through your use of our Services; and from service providers, transaction partners, affiliated entities, and other sources as permitted by law.
Personal Identifiers:
We may collect your name, email address, phone number, mailing or delivery address, IP address, and information from government-issued identification (which may include a driver’s license, state identification card, or passport) when you submit forms or surveys, contact us, apply for a program, place an order, or make a purchase. We automatically collect your IP address when you use our websites.
Business Purpose:
Provide, maintain, and improve Services; process orders and verify identity; communicate with you; provide customer support; analyze website usage; protect against fraud; and comply with law.
Sharing
Service providers and contractors; ordering and delivery partners; affiliates; and, where applicable, analytics and advertising partners.
RetentionWe keep identifiers for as long as reasonably necessary for the purposes described above and applicable legal obligations; applicable periods vary based on the record and are described in “Data Retention.”
Protected Classifications
We verify age to complete cannabis transactions. We may collect age and information reflected in identification documents where required by law, and gender if you voluntarily provide it in a survey or as part of identification verification.
Business Purpose:
Confirm eligibility to purchase cannabis and comply with legal requirements.
Sharing
Service providers and contractors, affiliates, and authorized regulators where required.
RetentionAs reasonably necessary for eligibility verification and applicable recordkeeping requirements; see “Data Retention.”
Commercial Information
When you purchase products or use our Services, we may maintain records of products purchased, orders, discounts, loyalty participation, and related transactions. Payment information may be processed by third-party payment providers.
Business Purpose:
Process purchases and delivery requests; provide customer service; administer promotions or memberships; analyze and improve Services; and comply with law.
Sharing
Payment processors; service providers and contractors; online ordering and delivery providers; and affiliates. Advertising or analytics disclosures, where applicable, are subject to your privacy choices.
Retention
As reasonably necessary for business and legal purposes, including cannabis regulatory recordkeeping; see “Data Retention.”
Internet or Other Electronic Network Activity Information:
We may automatically collect browsing activity, search activity, device and browser information, pages visited, and interactions with our websites, applications, emails, and advertisements.
Business Purpose:
Operate, protect, analyze, maintain, and improve our Services and, where permitted, measure communications and advertising.
Sharing
Website hosting and technology providers; analytics providers; advertising partners, where used; and affiliates, subject to applicable privacy choices.
RetentionBased on the applicable cookie lifespan, analytics configuration, operational need, and legal requirements; see “Data Retention.”
Geolocation Data:
We may infer your general location from an IP address. If you request delivery or enable location-based features, we may also collect a delivery address or location information required to provide that service. We do not otherwise claim to collect precise GPS location unless a feature requests it and appropriate notice is provided.
Business Purpose:
Provide localized content, assess delivery availability, fulfill orders, prevent fraud, and operate Services.
Sharing
Service providers, affiliates, and delivery or ordering providers as needed.
Retention
As reasonably necessary for service delivery, transaction records, and applicable legal requirements.
Audio, electronic, visual, thermal, olfactory, or similar information:
We may collect video surveillance footage at our physical stores for safety, security, and compliance purposes. Customer service calls or other recordings, if used, will be handled with notices or permissions required by law.
Business Purpose:
Maintain security; investigate incidents; support operations; and comply with law.
Sharing
Security service providers, contractors, insurers or authorities where appropriate and lawful.
Retention
For periods consistent with security needs, applicable policies, and preservation or legal requirements.
Professional or employment-related information:
We may collect professional or employment-related information when you search for job openings, submit an application, or otherwise interact with our recruitment process.
Business Purpose:
Evaluate applications, communicate about employment, operate our business, and comply with employment laws.
Sharing
Recruitment and HR providers, contractors, affiliates, and authorities as applicable.
Retention
As required by applicable employment laws and internal retention schedules.
Inferences:
We may derive limited insights from purchase and website activity, such as likely product interests or engagement with promotions, if we use personalization, loyalty analytics, or advertising tools. Such activities are subject to applicable privacy rights and choices.
Business Purposes: Understand interest in our Services, improve customer experience, and evaluate promotions where permitted.
Sharing: Relevant service providers, affiliates, and advertising or analytics partners where applicable.
Retention: As reasonably necessary for the underlying purpose, taking into account applicable privacy choices.
Sensitive Personal Information
Depending on the transaction, we may process government identification details, account credentials, or medicinal cannabis eligibility documentation, including a medical marijuana identification card or physician’s recommendation. We use sensitive personal information for legally permitted purposes such as identity and age verification, medicinal purchase eligibility, fraud prevention, transaction fulfillment, security, and legal compliance. We do not use sensitive information for unrelated purposes without any notice or consent required by law.
Sharing: Authorized service providers, affiliates, and regulatory or other authorities as legally necessary.
Retention: Only as long as reasonably necessary for the stated purpose and applicable legal retention requirements.
Cannabis Purchases & Age Verification
California law generally restricts adult-use cannabis purchases to customers 21 or older and medicinal purchases to qualified patients 18 or older with the required recommendation. Before cannabis transactions, we or our retail partners verify age and identity using acceptable identification and may verify medicinal eligibility. We may retain transaction and verification-related information as necessary to satisfy California cannabis regulations and other legal requirements.
Online Ordering, Delivery, and Third-Party Platforms
We may work with external menu, checkout, payment, fulfillment, delivery, and customer-management providers to facilitate online purchases and related services. Such providers may receive contact, order, delivery, and transaction information necessary for their role. Some external platforms have independent privacy practices; their own privacy notices may apply when they act as independent businesses rather than solely on our behalf.
Age-Restricted Marketing Communications
Before adding recipients to individualized cannabis marketing communications, we use age affirmation where required to establish that the recipient is at least 21 years old. If you opt in to marketing, we may send store updates, offers, and promotions by the channels you select. You may withdraw marketing consent as described under “Opt-Out.” Transactional and legally required notices may still be sent as permitted by law.
Additional Information About Data Collection and Sharing Practices
Aggregated and De-Identified Data: We may analyze and share aggregated or de-identified information with marketing, media, analytics, and other providers in accordance with applicable law. We take reasonable measures intended to prevent that information from being associated with a particular individual.
Combination of Information: We may combine information collected through our Services with other information from our business records, to the extent permitted by law.
Change of Ownership or Corporate Organization: We may transfer relevant personal information in connection with an actual or proposed merger, acquisition, asset sale, change in corporate control, financing, or reorganization, subject to applicable law.
Other Disclosures: We may disclose information to comply with law, respond to lawful requests, protect rights and safety, investigate suspected wrongdoing, or establish or defend legal claims.
Notice Regarding Public Posting Areas
If you disclose personal information in public message boards or similar public features offered through our Services, that information may be seen, collected, and used by others. Please use care before posting personal information in public areas. We are not responsible for independent uses of information that you choose to make public.
Third Party Links
Our websites may contain links to external websites and third-party services. We encourage you to review their privacy notices. We are not responsible for the independent privacy practices or content of websites and services not controlled by Statehouse Holdings.
Security of your Personal Information
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, or disclosure. These may include access controls, secured systems, and encryption in transmission where appropriate. No internet transmission or electronic storage system can be guaranteed completely secure.
Data Retention
We retain personal information for as long as reasonably necessary to provide Services, fulfill the purposes described in this Statement, honor applicable privacy requests, resolve disputes, maintain security, and comply with legal obligations. California cannabis regulations generally require specified records connected to licensed commercial cannabis activity to be maintained for at least seven years from creation unless a shorter period is specified. Other categories, including cookie data, website analytics, applicant information, and surveillance recordings, may be subject to different retention periods depending on their purpose and legal requirements. We delete or de-identify information when it is no longer reasonably necessary, except where retention is required or permitted by law.
Use of Cookies
Our websites use cookies and similar technologies, including pixels and identifiers, to support site functionality, remember preferences, measure traffic, and, where applicable, support advertising. Cookies may be session-based or remain on your device until they expire or are deleted.
Essential Cookies: Support secure, necessary website features, navigation, and core services.
Browsing and Functionality Cookies: Remember settings, device preferences, and information that makes repeat visits easier.
Analytics Cookies: Help measure website activity and improve experience. We may use Google Analytics. For details, see https://support.google.com/analytics/answer/6004245?hl=en and https://tools.google.com/dlpage/gaoptout.
Advertising Cookies: Where enabled, advertising partners may use cookies or pixels to evaluate ads or support personalized advertising. Under California law, some such disclosures may constitute “sharing” even when no money changes hands.
Cookie Consent & Preference Management
Where implemented, our cookie consent banner allows visitors to accept optional cookies, reject non-essential cookies, or customize available cookie categories. You may revisit available settings through a “Cookie Preferences” link on our website. Essential technologies may remain active to operate core site features. Browser settings may also allow you to control cookies, although disabling certain technologies may affect functionality. The operation of cookie controls depends on the technologies and settings available on the website you visit.
Your Privacy Choices and Opt-Out Preference Signals
California residents may opt out of the sale or sharing of personal information as defined under California law. Where we engage in activities subject to that right, we provide an appropriate opt-out mechanism, which may be labeled “Your Privacy Choices” or “Do Not Sell or Share My Personal Information.” We process legally recognized opt-out preference signals, including Global Privacy Control, as required by applicable law. A browser’s legacy “Do Not Track” setting is different from an opt-out preference signal recognized under California law.
Opt-Out
You may opt out of marketing emails by selecting the unsubscribe link; opt out of promotional text messages by replying STOP; or contact us through the methods below. We process opt-outs in accordance with applicable law. You may still receive non-promotional communications about orders, security, legal notices, or important service changes.
Your California Privacy Rights
Subject to applicable exceptions and verification, California residents may have the following rights under the CCPA:
Right to Know and Access: Request information about categories and specific pieces of personal information collected, sources, purposes, and disclosures, for the period required by law.
Right to Delete: Request deletion of personal information, subject to exceptions including legally required business records.
Right to Correct: Request correction of inaccurate personal information we maintain.
Right to Data Portability: Receive responsive personal information in a portable and, where technically feasible, readily usable format.
Right to Opt Out of Sale or Sharing: Direct us not to sell or share personal information as those terms are defined by California law, where applicable. Whether our website practices constitute a sale or sharing must be evaluated in light of the tracking and advertising technologies actually used.
Right to Limit Certain Uses of Sensitive Personal Information: Where applicable, request limitations on use or disclosure of sensitive personal information beyond purposes permitted without such a right.
Right to Non-Discrimination: Receive equal treatment for exercising privacy rights, subject to permissible programs and differences allowed under law.
Automated Decisionmaking Rights: California law establishes additional requirements for certain uses of automated decisionmaking technology on applicable effective dates. Where these rights apply to our practices, we will provide required notices and mechanisms.
To submit a privacy request, contact us by phone, contact form, or the privacy email below. We may request information reasonably necessary to verify your identity and authority; do not send passwords or complete identification documents unless specifically instructed through a secure verification process. Authorized agents may submit requests where allowed by law. We generally respond to verifiable requests within 45 days, subject to lawful extensions and applicable exceptions.
California “Shine the Light” law (Civil Code section 1798.83) may allow qualifying California customers to request information about disclosures to third parties for those parties’ direct marketing purposes. Contact us using the information below for such requests.
Financial Incentives
We may offer loyalty programs, memberships, promotions, or other benefits that involve the collection and use of personal information. Where a program qualifies as a financial incentive or price or service difference under California law, we will provide a separate Notice of Financial Incentive with applicable program terms, the personal information involved, how to opt in and withdraw, and a good-faith explanation of the value of the data as required. Participation is voluntary. Certain discounts for veterans, seniors, students, teachers, caregivers, vendors, or other eligible groups may require appropriate verification and are not necessarily financial incentives related to personal information.
For information about eligible programs, visit the applicable Urbn Leaf or Harborside membership and rewards pages. You may request withdrawal from a qualifying financial incentive program by following the applicable program instructions or emailing privacy@statehouse.co.
Website Accessibility
We are committed to improving the accessibility and usability of our websites for visitors with disabilities. We strive to follow recognized accessibility practices, including relevant Web Content Accessibility Guidelines (WCAG), and welcome feedback about accessibility barriers. If you experience difficulty accessing a page, online ordering feature, consent banner, or other part of our Services, contact us using the information below so we can work to provide reasonable assistance or an accessible alternative. For more information about our accessibility efforts, please review our Website Accessibility Statement.
Changes to this Statement
We may update this Privacy Statement to reflect changes in our Services, legal requirements, or privacy practices. Where required, we will provide additional notice before collecting new categories of personal information or using information for materially different purposes. Please review the date at the top of this Statement for the latest revision.
Contact Us
Statehouse Holdings welcomes your questions, comments, and concerns about this Privacy Statement. Please use the contact form available on the applicable website, call customer service at (888) 261-7811, or email privacy@statehouse.co regarding privacy requests.